This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa
File:                     039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json)
Hash identifier:          dFnVkoJqtiWCPgxg2/aOVKXNn5FMQGyk94MAJhhG0R4=
Subject key identifier:   4B:FC:ED:D3:80:5F:12:09:F9:17:BC:68:3B:D7:00:95:D3:A2:DC:9F
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584CB81C89A04C21ADC56E71FA80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     398210
IP address blocks:        168.220.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:89:a0:4c:21:ad:c5:6e:71:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=db965bc8-08d1-48b5-9d2f-c63f84321262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:0b:33:d8:af:b1:7c:16:1e:ed:59:0a:e4:
                    4c:e9:52:02:c9:28:7a:cf:64:1d:e4:a4:89:76:67:
                    52:c7:ee:a5:f7:04:ab:14:d1:55:84:eb:9b:b4:eb:
                    21:11:2a:90:5f:a3:70:7c:93:5a:1f:c7:38:b0:eb:
                    56:4c:33:75:cc:32:e6:47:bb:77:f0:76:45:71:88:
                    44:35:99:94:ab:d9:b1:7a:dd:42:2e:df:d0:46:0c:
                    d2:61:b9:f4:4a:08:b5:0e:e2:c9:1e:17:b9:cf:36:
                    60:d7:a1:4c:a6:4b:19:1d:4c:bf:9d:c2:83:f2:89:
                    e8:bc:c2:a9:15:65:a9:29:8c:0a:db:2b:20:1f:0d:
                    bb:19:a9:e0:d5:34:85:47:e0:d3:e9:85:77:bf:e7:
                    ff:4f:51:04:92:37:68:bb:a1:c5:3f:26:99:da:a0:
                    bc:be:fa:34:21:66:b9:d4:b4:98:fb:e8:16:1e:e9:
                    48:6f:a7:02:dc:9f:f2:7f:99:79:ce:47:3e:ac:dd:
                    89:fe:d7:2d:21:da:ea:86:f4:78:0d:9c:68:7d:9a:
                    04:e2:63:23:2d:66:ce:f5:a3:12:92:34:7c:b4:49:
                    57:0e:d1:e9:9c:42:0d:31:59:48:29:67:05:18:25:
                    1e:dc:14:f1:4e:5e:59:13:e2:9b:b7:dd:01:21:18:
                    92:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FC:ED:D3:80:5F:12:09:F9:17:BC:68:3B:D7:00:95:D3:A2:DC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:e4:ef:0d:ea:97:05:4b:8a:40:45:43:d2:84:84:7c:a2:
         0b:5c:65:c8:ff:72:5e:47:33:36:f0:e1:81:76:c4:de:3b:24:
         81:00:92:94:1c:0a:66:38:71:85:5c:0c:58:57:ac:67:62:d0:
         6d:92:aa:47:3f:f5:51:a4:f7:a3:36:56:18:7b:b9:df:3b:e1:
         bf:e4:38:dd:13:5b:e9:77:47:51:42:f5:8a:99:50:c5:b3:ca:
         41:12:04:7f:24:ce:49:7f:24:79:76:d3:1b:fa:1a:9d:69:42:
         97:a0:5b:2d:96:67:81:53:4c:c4:5a:cf:05:52:01:8e:96:78:
         1d:72:89:82:de:22:1c:7f:42:44:02:96:36:ab:62:f7:c0:76:
         da:fb:a2:2d:e1:9d:7e:05:a6:b3:56:8a:91:ca:ec:f8:95:ea:
         6f:37:cd:3d:32:f0:3f:6a:3d:2b:53:e7:63:b6:21:b9:f3:62:
         12:a5:12:f9:c8:d7:9f:c7:8e:ac:9d:b7:09:6b:e3:66:e3:de:
         99:f4:f0:97:4d:27:cc:9b:1c:ed:e8:44:59:cb:f5:78:43:26:
         11:3d:cc:72:5e:dd:48:46:30:87:04:37:f7:a0:f3:10:a1:cb:
         0d:82:fb:92:cd:1a:06:85:1e:2b:fb:12:ab:55:07:83:37:28:
         a1:0f:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 08:44:12 2026 by rpki-client